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THIS FACSIMILE TRANSMITTAL AND THE DOCUMENTS ACCOMPANYING THIS FACSIMILE TRANSMITTAL CONTAIN 
CONFIDENTIAL INFORMATION INTENDED ONLY FOR THE USE OF THE INDIVIDUAL NAMED ABOVE. IF YOU ARE 
NOT THE INTENDED RECIPIENT YOU ARE NOTIFIED THAT THIS COMMUNICATION MAY BE SUBJECT TO THE 
ATTORNEY-CLIENT OR WORK-PRODUCT PRIVILEGE AND THAT THE DISSEMINATION, DISTRIBUTION OR COPYING 
OF THIS COMMUNICATION IS STRICTLY PROHIBITED. IF YOU HAVE RECEIVED THIS COMMUNICATION IN ERROR, 
PLEASE IMMEDIATELY NOTIFY US BY TELEPHONE (COLLECT) TO ARRANGE FOR RETURN OF THE DOCUMENTS. 
RECEIPT BY ANYONE OTHER THAN THE INTENDED RECIPIENT IS NOT A WAIVER OF ANY ATTORNEY-CLIENT OR 
WORK-PRODUCT PRIVILEGE. 
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Applicant Initiated Interview Request Form 



Application No.: Wk^, fc44 First Named Applicant: M4g.£ & Oftto>|T 
Examiner: Aft&zSo S^Z^f T An Unit: ^ ^ 1 Status of A PP |ication: f^JOiKlfe. 



Tentajive Pa rticipa nts : 

(1 ) OS/Vk) M-MUKjyp^ (2). 



(3). 



(4). 



Proposed Date of Interview: V/ n j_ Proposed Time: Z'OQ (AM^^) 



(3) J ] Video Conference 



Type of Interview Requested: 
(1) ^ Telephonic (2) 1 J Personal 

Exhibit To Be Shown or Demonstrated; [ ] YES I } NO 
If yes, provide brief description: „ 



Issues To Be Discussed 



Issues 

(Rej M Obj., etc) 

0) 



Claims/ 
Fig. #s 



Discussed Agreed 



Not Agreed 



Prior 
Art 



(2). 



(3). 



(4). 



[ ] 


[ 1 


t } 


[] 


[ 1 


I ) 


[ ] 


[ 1 


[ ] 


[ 1 


[ ] 


I } 



[ ] Continuation Sheet Attached 
Brief Description of Arguments to be Presented; 



An interview was conducted on the above-identified application on • - 

NOTE: This form should be completed by applicant and Submitted to tilt examiner in advance of the interview 
(see MPEP § 713.01). 

This application will not be delayed from issue because of applicant's failure to submit a written record of this 
interview. Therefore* applicant is advised to file a statement of the substance of this interview (37 CFR 1.133(b)) 
as soon as possible. 



Appncant/Applicanfs RepresenJtffive'Sjgnature 
rd/Primed Name of Applicant or Rei 



Examiner/SPE Signature 



Typed/Printed Name of Applicant or Representative 
Registration Number, if applicable 



This collection of information la required by )7 CFR Ll$>. The Information Is required m obtain or retain a benefit by tbo public which b to nte (and by the 
USPTO to procosa) On application. Confidentiality i* fcovemod by V&C. 1» and i7 CFR t.H and l-t4- Thu coltection u estimated to take 21 minutes to 
complete, including gathering, prcporinc, and »ubmittini; the completed application form to tho USPTO. Time will vary depending upon the individuel cane, Any 
comment* on the amount of time yoo require to complete tbb farm and/nr »uc£«»uonj for reducing this burden, thould be *ent l« the Chief Informuiioo Officer, 
U.S. Patent .nd Trademark Office. U.S. Department of Commerce, P.O. Roi 14*0, Alexandria VA 123 13- J 450. 1?0 NOT SEND FEES OR COMPLETED KORMS 

TO THIS ADDRFSS. SFND TO: Commissioner for Patents, P.O. Box 1450, Alexandria, VA 223J3-I450. 

If you need assistance in completing the form, call f-800-PTO*9J99 and select option 2. 
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The Examiner states in the pending Office Action that "Kouznetsov does not explicitly 
disclose a weighting function that scores/determines the monitored events/code under 
investigation as valid/non-malicious code." The Examiner appears to rely on Chess and 
Hill to remedy this deficiency. See Office Action at 3-4. 

Applicant disagrees that either Chess or Hill includes the teachings cited by the 
Examiner. Applicant would like to discuss each of these references in turn during the 
telephonic interview of 1/30/08. 

Chess: The Examiner cites this reference as teaching the "applying" and "weighting" 
limitations of, for example, claim 105. See Office Action at 3 (citing col 5, lines 55-67 
and col. 6, lines 1-29 of Chess). The "suspect files" of Chess, however, are not the 
claimed "code under investigation" as nowhere does Chess suggest that the "suspect file" 
is an "active program," Chess is not even concerned with "active programs" as in claim 
105 (for example); instead, Chess is concerned with "efficiently managing the 
transmission of units of digital data from node to node." See Chess (Abstract). Also, 
Applicant notes that the cited portion of Chess does not appear to teach or suggest 
Weighting" as in claim 1 05. 

Hill: The Examiner appears to be using this reference to teach the following limitation of 
claim 105: tL using the first and second scores to categorize the code under investigation 
with respect to the likelihood of the code under investigation compromising the security 
of the computer system," Applicant submits that Hill is concerned solely with "attacks." 
See Hill (Abstract, Title). While Hill may teach "categorizing" "attack severity," Hill at 
6:17, this reference has no teaching corresponding to the "first score" of claim 105. Hill 
also does not appear to teach the "second score" of that claim— as Hill does not appear to 
teach "weighting." 

The above arguments are merely representative of the deficiencies of the cited references 
and are not exhaustive. 
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